Mind map
DHCP Snooping
Map content
DHCP Snooping
- It is a Layer 2 switch feature, not a router feature. It can be configured globally on a switch or by VLAN. Once enabled, all ports are considered untrusted until configured as trusted.
- Rate limiting: Optionally limits the number of received DHCP messages per second, per port.
Trusted Port
- Allow all incoming DHCP messages.
Untrusted Port
- Watch for incoming DHCP messages, and discard any that are considered to be abnormal for an untrusted port and therefore likely to be part of some kind of attack.
- Server messages: Untrusted ports discard all incoming messages that are considered server messages. Client messages: Untrusted ports apply more complex logic for messages considered client messages. They check whether each incoming DHCP message conflicts with existing DHCP binding table information and, if so, discard the DHCP message. If the message has no conflicts, the switch allows the message through, which typically results in the addition of new DHCP Binding Table entries.
Information
- Description
- Ingeniería Mind Map on DHCP Snooping, created by Alejandro Castillo on 04/10/2018.
- Created by
- Alejandro Castillo
- Views
- 0
- Rating